Lead Penetration Tester – Federal Government (Multiple Positions)

? Location: Canberra, Adelaide, Brisbane or Melbourne (Hybrid)

⏳ Contract Duration: 12 months + potential extensions of up to 24 months

? Estimated Start Date: February 2027

? Industry: Federal Government – Cyber Security

? Security Requirement: NV1 Security Clearance required prior to commencement

About the Opportunity

Hatchit Studios is seeking experienced Lead Penetration Testers for labour hire contract opportunities with a major Australian Federal Government agency.

These roles involve leading complex penetration testing, vulnerability assessments and simulated cyber attack exercises across enterprise applications and infrastructure.

Successful candidates will identify security vulnerabilities, recommend remediation strategies and collaborate with technical teams and stakeholders to strengthen the security and resilience of critical government systems.

Working Arrangements: Candidates will be required to work onsite for the initial six weeks, with hybrid arrangements potentially available thereafter (typically a minimum of three days onsite per week).

Key Responsibilities

- Lead complex penetration testing and vulnerability assessments across enterprise environments.
- Conduct web application, mobile application and infrastructure penetration testing.
- Plan and execute simulated cyber attacks to identify security weaknesses and assess technical controls.
- Develop, review and approve penetration testing plans, methodologies and test cases.
- Undertake forensic activities, including initial incident response, evidence preservation and analysis.
- Identify, document and assess vulnerabilities, security risks and remediation recommendations.
- Conduct penetration testing across Windows and Linux environments.
- Collaborate with system owners and technical stakeholders to define testing scope and validate remediation activities.




- Prepare detailed technical reports and communicate findings to technical and non-technical stakeholders.
- Provide technical leadership, mentoring and knowledge transfer to other cyber security professionals.

Skills & Experience Required

- Extensive hands-on experience conducting complex penetration testing and vulnerability assessments.
- Demonstrated experience leading penetration testing engagements or technical security testing teams.
- Solid expertise in web application security testing across complex enterprise platforms.
- Proven experience performing infrastructure penetration testing across Windows and Linux environments.
- Experience conducting simulated attack exercises and evaluating security controls.
- Working knowledge of digital forensics, including evidence collection, preservation and analysis.
- Proficiency with commercial and bespoke penetration testing tools and methodologies.
- Strong understanding of cyber security risks, vulnerabilities, attack techniques and remediation strategies.
- Excellent technical documentation, reporting and stakeholder communication skills.
- Ability to work independently and provide technical leadership within complex enterprise environments.

Desirable Certifications:

- CREST Registered or Certified Penetration Tester
- Offensive Security certifications (including OSCE3 or equivalent)
- Certified Ethical Hacker (CEH)
- CompTIA PenTest+ or Security+
- GIAC Penetration Tester (GPEN)
- CHECK Team Leader or equivalent

Why Apply?

- Work on high-impact cyber security initiatives supporting critical Australian Government services.
- Competitive contract rates.
- Long-term engagement with potential extensions.
- Flexible hybrid working arrangements following the initial onsite period, subject to agency approval.
- Opportunity to lead complex security testing engagements across enterprise-scale environments.
- Collaborate with experienced cyber security professionals and government stakeholders.

📌 Lead Penetration Tester (Melbourne)
🏢 Hatchit Studios
📍 Melbourne